Search Vulnerabilities

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags

DataDog::DogStatsd versions through 0.07 for Perl allow metric injections

Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks

Tabby: Dragging and Dropping a File into Tabby Can Lead to Code Execution

gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection

In KDE KCoreAddons before 6

BaseCookie.js_output() does not neutralize embedded characters

MuPDF < 1.27 mutool ANSI Injection via Metadata

Microsoft Power Apps Desktop Client Spoofing Vulnerability

OpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval Prompt

Terminal Escape Injection in mmctl Report Posts Command

QuRouter

Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.

Word Copilot Information Disclosure Vulnerability

Mailpit has SMTP Header Injection via Regex Bypass

badkeys vulnerable to ASCII control character injection on console via malformed input

Apache HTTP Server: CGI environment variable override

Soft Serve does not sanitize ANSI escape sequences in user input

Apache Tomcat: console manipulation via escape sequences in log messages